Consistent with ISO 37301, the framework supplies an indicator for every component of the compliance management system; an indicator may rest on one requirement or on several taken together. The indicators fall into three groups: planning and establishment (context and interested parties; compliance obligations; scope and compliance risk assessment; leadership and commitment; compliance governance principles; compliance culture; roles, responsibilities and authorities; compliance policy and objectives; planning of actions and resources), implementation (operational actions for risks and opportunities; allocation of resources; competence, capacity building and awareness; employment, rewards and discipline; training; communication; raising concerns; investigation; documented information), and performance evaluation and improvement (monitoring, measurement, analysis and evaluation; internal audit; management review; nonconformity, noncompliance and correction; continual improvement). Annex A pictures the framework.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.